AbuseIPDB » 5.21.5.139

5.21.5.139 was found in our database!

This IP was reported 6,131 times. Confidence of Abuse is 100%: ?

100%

ISP	Nawras Mobile Broadband - Pool 135 -166
Usage Type	Fixed Line ISP
ASN	AS50010
Hostname(s)	dynamic.isp.ooredoo.om
Domain Name	ooredoo.om
Country	Oman
City	Muscat, Muscat

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 5.21.5.139

Whois 5.21.5.139

IP Abuse Reports for 5.21.5.139:

This IP address has been reported a total of 6,131 times from 678 distinct sources. 5.21.5.139 was first reported on October 19th 2021, and the most recent report was 1 minute ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
GeorgieNAS77	2025-01-13 03:15:31 (1 minute ago)	...	Brute-Force
anon333	2025-01-12 23:35:23 (3 hours ago)	Hacker syslog review 1736724923	Hacking
adlp.org	2025-01-12 22:45:14 (4 hours ago)	Jan 12 22:45:07 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;5.21.5.139;[UNAVAILABL ... show moreJan 12 22:45:07 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;5.21.5.139;[UNAVAILABLE];[email protected];smtp;plain;1;@adlp.org$;KILL;2;Licence to kill Jan 12 22:45:10 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;5.21.5.139;[UNAVAILABLE];[email protected];smtp;plain;1;@adlp.org$;KILL;2;Licence to kill Jan 12 22:45:13 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;5.21.5.139;[UNAVAILABLE];[email protected];smtp;plain;1;@adlp.org$;KILL;2;Licence to kill ... show less	Brute-Force
rtbh.com.tr	2025-01-12 20:50:52 (6 hours ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Paul Smith	2025-01-12 16:42:20 (10 hours ago)	Email Auth Brute force attack 2/2 in last day	Brute-Force
anonymous user	2025-01-12 06:57:56 (20 hours ago)	Jan 12 04:27:30 mocha sshd[823278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ... show moreJan 12 04:27:30 mocha sshd[823278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.21.5.139 Jan 12 04:27:32 mocha sshd[823278]: Failed password for invalid user Default from 5.21.5.139 port 35208 ssh2 Jan 12 14:57:55 mocha sshd[1507048]: Invalid user centos from 5.21.5.139 port 38022 ... show less	Brute-Force SSH
Ragnarocek	2025-01-12 06:00:41 (21 hours ago)	Automatic report from EV firewall log.	Port Scan Hacking Brute-Force
DSSYSTEMS	2025-01-12 06:00:33 (21 hours ago)	Automatic report from DSS firewall log.	Port Scan Hacking Brute-Force
marioselgreco	2025-01-12 05:00:13 (22 hours ago)	Automated report from mail server logs	Email Spam Hacking Spoofing
rtbh.com.tr	2025-01-11 20:50:54 (1 day ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
ghostwarriors	2025-01-11 20:20:43 (1 day ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
jasperedv.de	2025-01-11 20:08:35 (1 day ago)	Failed SMTP Login - Brutforcing	Email Spam Brute-Force
SANYALnet Labs	2025-01-11 20:07:18 (1 day ago)	Jan 11 20:07:14 gigabyte-h410m sshd[1860965]: Invalid user adm from 5.21.5.139 port 50560 Jan ... show moreJan 11 20:07:14 gigabyte-h410m sshd[1860965]: Invalid user adm from 5.21.5.139 port 50560 Jan 11 20:07:16 gigabyte-h410m sshd[1860965]: Failed password for invalid user adm from 5.21.5.139 port 50560 ssh2 Jan 11 20:07:17 gigabyte-h410m sshd[1860965]: Connection closed by invalid user adm 5.21.5.139 port 50560 [preauth] ... show less	Brute-Force
Anonymous	2025-01-11 19:40:37 (1 day ago)		Brute-Force SSH
Anonymous	2025-01-11 19:05:20 (1 day ago)	SMTP brute force - auth failed	Brute-Force Exploited Host